Know when corporate credentials start circulating

Q: What does “dark web monitoring” actually mean?

Primarily credential exposure: corporate email addresses and associated credentials appearing in breach and combo data, attributed back to the domains you own. It is paired with brand-mention intelligence across the open web and social platforms.

Q: How are credentials matched to our company?

By domain. Exposure is matched to the domains you own, so the assessment starts from the same information an attacker would use. You do not need to upload a staff directory.

Q: How do you verify whether a finding is still relevant?

Each finding is attributed to your domains, dated, and rated by whether the credential is plausibly still live, not an old breach recirculating.

Q: Do you monitor employee personal accounts?

No. Exposure is matched to the domains you own, so findings cover corporate identities rather than staff members’ personal accounts.

Q: What should we do when a credential is found?

Each finding carries the evidence, the affected identity, severity and remediation, with an SLA attached. In practice that is a forced reset plus a check for reuse against your own perimeter.

Guardian Gaze matches exposed corporate credentials back to
your domains, verifies the signal and tells you which identity needs
attention.

Check My Organisation →

Matched by domain
No employee list required

Actionable exposure, not another alert feed

Leaked Credentials

Identify exposed corporate
identities tied to your domain.

Brand Impersonation

Detect lookalike infrastructure and
suspicious brand activity.

Verified Signals

Filter stale or irrelevant exposure
before it reaches your team.

What is monitored

Corporate credentials in breach data
Brand mentions
Impersonation attempts
Lookalike domains
WHOIS / abuse intelligence

What is Finding anatomy

Severity, with the evidence that produced it
5W reasoning: what, why, where, who and impact
Remediation and an SLA for the fix
The compliance control the exposure breaks
MITRE ATT&CK tactic and technique mapping

DashboardPortfolioReportsIntegrationsComplianceTakedownsMITRE ATT&CKAlertsModulesJD

Alerts

Persistent findings across your environment

Open Alerts9

Critical1

High1

SLA Breached0

SeverityModuleTitleAffectedDiscoveredSLA DueOwnerScoreStatusActions

CriticalBrand ProtectionDark-web exposure observeddarkweb_findings_presentmobilinkbank.com05/21/2026—Unassigned16.0Open

HighDomain SecurityDMARC policy is p=nonedmarc_not_enforcedmobilinkbank.com05/21/2026—Unassigned11.0Open

LowDomain SecurityTLS-RPT reporting missingtls_rpt_missingmobilinkbank.com05/21/2026—Unassigned1.5Open

LowDomain SecurityDNSSEC unsigneddnssec_unsignedmobilinkbank.com05/21/2026—Unassigned3.0Open

LowApplication SecuritySecurity headers missingmissing_security_headersmobilinkbank.com05/21/2026—Unassigned3.0Open

LowApplication SecuritySubresource Integrity missingsri_issuesmobilinkbank.com05/21/2026—Unassigned2.1Open

MediumBrand ProtectionBrand TLD permutation(s) registeredbrand_tld_permutationsmobilinkbank.com05/21/2026—Unassigned6.5Open

Rotate first. Investigate second

Reset
Force a credential change.
Check reuse
Look for reuse across your own perimeter.
Identify source
Understand where the exposure likely originated.
Monitor recurrence
Watch for new exposures and related signals.

Be precise about “dark web”

Guardian Gaze focuses on attributable breach and credential exposure rather than claiming privileged access to criminal communities. The value is identifying which exposed data belongs to your organisation and whether it is still actionable.

Customer Story

“The useful part wasn't being told that credentials existed in breach data. It was knowing exactly which corporate identities required action.”

Security Operations Manager

Common questions

What does “dark web monitoring” actually mean?

How do you verify whether a finding is still relevant?

Do you store exposed passwords?

How are credentials matched to our company?

Do you monitor employee personal accounts?

What should we do when a credential is found?

Find out what is already circulating

Credential exposure is assessed alongside the rest of your external posture.

Request Free Rating